Error: rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft
File:                     gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft (raw, json)
Hash identifier:          sKYHqs5xUTZlJdHnfvOiTEkqjg1TSVOi+Ik8eEYhOwM=
Subject key identifier:   B9:EA:07:F5:F7:7F:17:04:37:A7:DF:97:3B:0D:67:52:44:9D:12:EB
Authority key identifier: 80:34:32:06:81:7C:BC:FD:89:72:99:1B:D8:18:3D:34:CE:E9:2E:E8
Certificate issuer:       /CN=F363339CAF/serialNumber=80343206817CBCFD8972991BD8183D34CEE92EE8
Certificate serial:       3A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft
Manifest number:          39
Signing time:             Wed 04 Nov 2026 05:54:26 +0000
Manifest this update:     Wed 04 Nov 2026 05:54:25 +0000
Manifest next update:     Fri 06 Nov 2026 05:54:25 +0000
Files and hashes:         1: gDQyBoF8vP2Jcpkb2Bg9NM7pLug.crl (hash: dQHx9oavJL4vADURhM/bmxeM39MKNjHKe963L7WHCe4=)
                          2: F13CB088ADDE11F18017FDC1CE1D38B0.roa (hash: tain45EE/gMV2dgtm+eu5mXzz/PAqUymSj013QdOZbg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363339CAF, serialNumber=80343206817CBCFD8972991BD8183D34CEE92EE8
        Validity
            Not Before: Nov  4 05:54:25 2026 GMT
            Not After : Nov  6 05:54:25 2026 GMT
        Subject: CN=6aeac891-448c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:45:01:b8:65:d5:ef:fa:3e:84:37:55:53:
                    91:81:ae:1a:8d:2f:6f:0b:d1:3b:77:2c:66:3c:13:
                    d6:0c:7a:81:5b:85:b7:89:3a:d3:b9:f1:f9:2b:fc:
                    c2:70:7e:ab:e4:e3:fa:5f:99:cd:7c:80:49:3e:dd:
                    10:4b:8a:0e:8c:43:11:9f:7e:c7:e9:30:96:d8:9d:
                    1f:3d:5e:45:55:98:c2:28:f4:c1:bf:5b:89:78:df:
                    98:43:87:66:22:23:b5:16:6c:b7:a4:ea:9e:87:7a:
                    d1:b5:dc:c7:e0:07:82:6c:d9:4c:d1:1e:f3:93:41:
                    dd:c1:09:93:66:ee:3d:79:65:54:d4:bc:2e:07:36:
                    c6:4f:e9:50:16:63:80:4d:5a:a1:2c:df:53:51:41:
                    a1:e4:e8:ea:3a:12:0d:9d:6b:9f:2d:9f:56:43:b7:
                    b9:d3:c9:72:33:b2:88:2a:b6:a1:af:dc:5e:0c:99:
                    9e:6b:24:bd:a8:d8:f3:ad:18:2b:69:09:ab:1f:8d:
                    da:b3:8a:dd:4b:10:98:c7:13:38:cc:0c:f7:0c:ff:
                    7b:a2:2e:66:45:d9:21:ed:5f:f0:e2:24:07:03:01:
                    bc:28:02:38:be:0c:1e:c5:e0:59:89:93:d2:6c:ab:
                    d7:30:2b:9a:a4:05:b7:76:c2:98:7d:3b:25:ae:41:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:07:F5:F7:7F:17:04:37:A7:DF:97:3B:0D:67:52:44:9D:12:EB
            X509v3 Authority Key Identifier:
                keyid:80:34:32:06:81:7C:BC:FD:89:72:99:1B:D8:18:3D:34:CE:E9:2E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:20:50:3f:6c:ab:6d:b3:f0:fb:99:60:11:50:47:f5:93:
         3f:62:d3:6b:df:dc:97:59:59:ac:7c:79:81:59:3e:a7:7d:77:
         57:41:d5:09:04:48:0f:34:13:f1:a6:0d:07:56:84:94:17:7e:
         fd:8d:f7:7f:fc:a2:97:48:88:4f:d3:0c:59:05:71:ee:ac:bd:
         4a:5c:e7:00:e7:2e:03:a4:66:fa:d1:06:2f:54:e4:bc:e7:6c:
         44:d4:65:28:5a:83:7a:6c:77:88:d8:b6:98:99:01:e6:04:c2:
         86:83:05:2f:c9:23:0f:20:c9:7d:4f:57:23:ce:51:17:92:bd:
         3d:f1:76:34:cc:55:cd:0e:4a:db:0c:23:82:ad:71:4d:e1:70:
         e0:cd:1a:2c:b7:39:67:75:f9:d6:b6:84:f6:2d:87:e9:bd:0e:
         03:e1:e3:13:85:68:5c:24:6c:c6:70:e5:85:ea:09:64:72:99:
         4a:fd:f4:a2:f0:e3:94:35:71:cf:eb:ed:dc:2a:08:0e:09:5a:
         50:5d:c5:9f:42:b6:3e:a6:6e:cd:dd:d2:ff:86:30:ff:5c:65:
         05:63:1b:49:cb:72:f4:40:75:42:e4:59:78:8e:f0:74:1f:a3:
         7d:e8:e9:07:5e:62:ed:39:8c:b1:d7:72:40:ed:c6:a6:17:24:
         82:bf:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:19:47 2026 by rpki-client